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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Canceled), 

2. (Currently Amended) The program update apparatus according to claim 1, furth e r 
comprising: A program update apparatus for updating an operation program on which an 
a pplication program is executed, comprising: 

storage means for separately storing at least two operation programs; 

activating means for selecting and activating one of the operation programs, wherein the 

selected operation program configures a setting required for execution of the 

application program; 

first failure detecting means for detecting a failure in activation of the selected operation 
program; 

second failure detecting means for detecting a failure in activation of the application 
program executed on the selected operation program, wherein the application 
program requires the setting configured by the selected operation program for the 
execution thereof; 

a recovering application which resets the setting configured by the selected operation 
program; and 

informing means which gives information to an external device outside the program 
upgrade apparatus, 

wherein, in the case when the first failure detecting means detects any failure in the 
activation of the selected operation program, the activating means selects another 
operation program to switch over from the selected operation program, and in the 
case when the second failure detecting means detects any failure in the activation 
of the application program, the recovering application resets the setting 
configured by the selected operation program, and 

wherein, in the case when the updating process of the operation program is not carried 
out correctly, by the informing means, the information indicating the incorrect 
updating process is given to an external device outside the program upgrade 
apparatus. 
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3. (Canceled). 

4. (Currently Amended) The program updat e method according to claim 3, further comprising 
the Gtops of: A method for updating an operation program on which an application program 
is executed, comprising: 

operating a first operation program, stored in a first storage area, to execute the 
application program, wherein the application program uses a first setting 
configured by the first operation program: 

storing a second operation program in a second storage area formed separately from the 
first storage area; 

activating the second operation program to switch over from the first operation program, 
wherein a second setting used for execution of the application program is 
configured by the second operation program; 

detecting a failure in activation of the second operation program; 

detecting a failure in activation of the application program; 

in the case when a failure is detected in the activation of the second operation program, 
activating a first operation program to switch over from the second operation 
program; 

in the case when a failure is detected in the activation of the application program, 
activating a recovering application which resets a setting used for execution of the 
a pplication program and resetting the second setting to the first setting; and 

in the case when the updating process of the operation program is not carried out 
correctly, giving the information indicating the incorrect updating process to an 
external device. 
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